ORBIT

ORBIT is a local-first agent message bus CLI built on NATS with:

• Request/reply RPC (orbit call, orbit serve)
• Pub/sub (orbit publish, orbit subscribe)
• Service discovery + capability inspection (orbit inspect)
• Trace timelines with retries/timeouts (orbit trace)
• Canonical typed envelopes with integrity hash
• NATS Service API compatibility ($SRV.PING|INFO|STATS)
• JetStream KV service registry + Object Store data packs
• Context switching (orbit context ...)
• Optional OpenTelemetry OTLP export
• Benchmarking command (orbit bench)
• Orbit overhead benchmark (orbit bench-overhead)
• Live health/stat monitor (orbit monitor)
• Local persistent control-plane agent (orbit agent)
• External Orbit API service (orbit api)
• Federated agent delivery (orbit federate, POST /v1/federation/send)
• Externalized HTTP and persistent-worker method transports

Orbit vs Velocity

Velocity is a separate runtime from Orbit. It is a WebSocket proxy/control-plane tool focused on reducing frame and byte overhead while protecting latency for agent-to-upstream traffic.

Orbit is the NATS-native local-first message bus/runtime in this repository (orbit + echocore) for RPC, pub/sub, service discovery, tracing, and API integration.

Use them together when needed:

• Use Velocity on the edge WebSocket path.
• Use Orbit for service bus and agent workflow routing.

Install

npm install -g orbitai-cli

From source:

npm install
npm run build
npm link

Star Module

Star is the onboarding module for fast integration:

• orbit init scaffolds ready-to-run files.
• orbit doctor validates runtime dependencies and config health.
• examples/star/* includes known-good templates for single-agent, multi-agent, and production baseline flows.

Commands

orbit up
orbit serve --name <svc> --spec spec.json [--queue workers] [--concurrency 8]
orbit call <svc>.<method> --json @req.json [--run-id <id>] [--pack-file ./blob.bin] [--timeout-ms 5000] [--retries 2]
orbit publish <topic> --json @event.json [--run-id <id>] [--pack-file ./blob.bin] [--durable] [--dedupe-key <id>]
orbit subscribe <topic> [--durable-name <name>] [--stream <name>] [--dlq-topic <topic>] [--ack-wait-ms 30000] [--max-deliver 5] [--require-json]
orbit dlq-inspect <dlq-topic> [--stream <name>] [--limit 100] [--from-ts <iso>] [--to-ts <iso>] [--error-code <code>] [--source-consumer <name>]
orbit dlq-purge <dlq-topic> [--stream <name>] [--limit 100] [--from-ts <iso>] [--to-ts <iso>] [--error-code <code>] [--source-consumer <name>] [--dry-run]
orbit dlq-replay <dlq-topic> --to-topic <topic> [--limit 100] [--stream <name>] [--from-ts <iso>] [--to-ts <iso>] [--error-code <code>] [--source-consumer <name>] [--purge-replayed] [--non-durable-publish]
orbit inspect <svc>
orbit trace <run-id>
orbit context [list|current|use <name>|set <name> --nats-url <url> --timeout-ms <n> --retries <n>]
orbit bench <svc>.<method> --json @req.json [--duration-s 15] [--concurrency 10] [--ramp-to 50] [--ramp-step-s 1] [--ramp-step-concurrency 2] [--timeout-ms 2000] [--retries 0]
orbit bench-overhead <svc>.<method> --json @req.json [--iterations 100] [--timeout-ms 2000]
orbit monitor [--service <svc>] [--interval-ms 2000] [--timeout-ms 1500] [--alerts] [--alert-latency-ms 250] [--alert-error-rate 0.05] [--alert-consecutive 3] [--alert-cooldown-s 30] [--once]
orbit agent
orbit api [--host 127.0.0.1] [--port 8787]
orbit federate <agent@domain> <svc>.<method> --json @req.json [--endpoint <url>] [--delivery-class best_effort|durable|auditable] [--timeout-ms 5000] [--run-id <id>] [--e2ee-key-id <id>]
orbit bridge <a2a|mcp> --json @msg.json [--dispatch] [--to <agent@domain>] [--target <svc>.<method>]
orbit abuse-report --reporter <agent@domain> --subject <agent@domain> --reason <text> [--severity low|medium|high|critical] [--evidence @json]
orbit federation <bootstrap|jwks|gen-e2ee-key|help> [--domain <domain>] [--client-id <id>] [--key-id <id>]
orbit init [--profile single-agent|multi-agent|production] [--out-dir .] [--force]
orbit doctor
orbit cell <init|start|gateway|status> [...]
orbit echo <start|publish|subscribe|stats|bench> [...]
echocore start [--socket /tmp/echocore.sock] [--tcp-port 7777]
echocore publish --channel agent.loop --json @event.json
echocore subscribe --channel agent.loop
echocore bench [--messages 50000] [--bytes 1024]

EchoCore

echocore is a local event-stream module optimized for desktop-agent component wiring:

• Shared-memory ring buffers per channel (in-process, zero-copy subscriber views)
• Backpressure policies (drop_oldest or drop_newest)
• Channel isolation
• Local unix-socket daemon bridge with optional TCP fallback
• Built-in benchmark command (echocore bench) for in-process vs network-framed baseline

You can invoke EchoCore either directly (echocore ...) or through Orbit (orbit echo ...).

Cell Mode

orbit cell lets you run a cloud-friendly two-tier topology from one CLI package:

• orbit cell init: scaffolds production routing template JSON.
• orbit cell start: starts local EchoCore daemon, optional embedded gateway.
• orbit cell gateway: bridges local channels to Orbit network subjects.
• orbit cell status: reports process state and local channel stats.

Routing modes (--mode or routes file):

• local_only: local channel only, no network bridge.
• replicate: bi-directional bridge between local channel and network subject.
• global_only: egress local->network only.

Examples:

orbit cell init --out ./examples/cell.routes.production.json
orbit cell start --gateway --routes @./examples/cell.routes.production.json
orbit cell start --gateway --channel agent.loop --mode replicate
orbit cell gateway --socket ~/.orbit/echocore.sock --channel agent.audit --mode global_only
orbit cell status

Canonical Envelope

All bus messages use:

{
  "id": "uuid",
  "run_id": "uuid",
  "ts": "2026-02-25T12:00:00.000Z",
  "kind": "request|response|event|capability|trace",
  "schema_version": "1.0",
  "payload": {},
  "data_pack": {"bucket":"orbit_datapacks","key":"run/key.bin"},
  "provenance": {},
  "cost": {},
  "a2a": {
    "task_id": "task-123",
    "thread_id": "thread-12",
    "parent_message_id": "msg-1",
    "capabilities": ["search", "retrieve"],
    "traceparent": "w3c-traceparent",
    "dedupe_key": "event-abc"
  },
  "nonce": "uuid",
  "exp": "2026-02-25T12:00:05.000Z",
  "ack_id": "ack-uuid",
  "trace_id": "trace-uuid",
  "kid": "federation-key-id",
  "sig": "base64url-signature",
  "hash": "sha256-of-canonical-fields"
}

Quickstart

60-second quickstart

orbit init --profile single-agent
orbit up
orbit serve --name text --spec examples/star/echo.worker.spec.json
orbit call text.upper --json @examples/star/request.json
orbit doctor

Copy-paste integration snippets

Node agent:

orbit call text.upper --json '{"text":"agent request"}'

Python agent:

from orbit_sdk.client import OrbitClient

client = OrbitClient("http://127.0.0.1:8787")
print(client.call("text.upper", {"text": "python agent"}))

CI:

bash examples/star/ci-call.sh

Docker-first bootstrap

export ORBIT_API_TOKEN=change-me
docker compose -f docker-compose.star.yml up

Known-good templates:

• examples/star/template.single-agent.json
• examples/star/template.multi-agent.json
• examples/star/template.production-baseline.json

1. Start broker:

orbit up

2. Create a service spec (example at examples/echo.spec.json) and start adapter:

orbit serve --name text --spec examples/echo.spec.json
orbit serve --name text --spec examples/echo.spec.json --queue text-workers --concurrency 8

3. Call a method:

cat > req.json <<'JSON'
{"text":"hello orbit"}
JSON

orbit call text.upper --json @req.json

Call with a large binary data-pack attached:

orbit call text.upper --json @req.json --pack-file ./artifact.bin

4. Inspect service capabilities:

orbit inspect text

Also interoperates with NATS service introspection:

nats req '$SRV.INFO.text' '{}'

5. Publish/subscribe:

orbit subscribe agents.events
orbit publish agents.events --json '{"type":"build_done","ok":true}'

# Durable consumer + DLQ
orbit subscribe agents.events --durable-name agents-consumer --stream orbit_agents_stream --dlq-topic agents.events.dlq --max-deliver 5 --require-json

# Inspect only one consumer's overload failures in a window
orbit dlq-inspect agents.events.dlq --source-consumer agents-consumer --error-code AGENT_OVERLOADED --from-ts 2026-02-26T00:00:00Z --to-ts 2026-02-26T23:59:59Z

# Replay filtered DLQ messages back to primary topic and remove replayed entries
orbit dlq-replay agents.events.dlq --to-topic agents.events --error-code AGENT_OVERLOADED --source-consumer agents-consumer --limit 100 --purge-replayed

# Purge matching DLQ entries (preview first)
orbit dlq-purge agents.events.dlq --error-code AGENT_OVERLOADED --dry-run
orbit dlq-purge agents.events.dlq --error-code AGENT_OVERLOADED

6. View trace timeline:

orbit trace <run-id>

7. Run a load benchmark:

orbit bench text.upper --json @req.json --duration-s 20 --concurrency 16 --timeout-ms 1500 --retries 0

Run step-ramp benchmark profile:

orbit bench text.upper --json @req.json --duration-s 30 --concurrency 4 --ramp-to 20 --ramp-step-s 2 --ramp-step-concurrency 2

8. Monitor services live:

orbit monitor
orbit monitor --service text --interval-ms 1000
orbit monitor --service text --once
orbit monitor --service text --alerts --alert-latency-ms 200 --alert-error-rate 0.02
orbit monitor --service text --alerts --alert-consecutive 3 --alert-cooldown-s 45

9. Start external API service:

orbit api --host 127.0.0.1 --port 8787

If ORBIT_API_TOKEN (or api.authToken) is set, pass Authorization: Bearer <token> or x-orbit-token. GET /healthz and GET /readyz are open; API action routes and /metrics require auth when token auth is enabled.

Production Bootstrap

Generate a hardened API profile with token auth, TLS/mTLS enabled, and explicit runtime limits:

npm run bootstrap:prod

This writes ./.orbit/config.production.json. Merge it into your active ./.orbit/config.json (or ~/.orbit/config.json), install certs at ~/.orbit/tls, then start orbit api.

Service Spec Format

{
  "version": "1.0.0",
  "description": "example service",
  "methods": {
    "methodName": {
      "description": "optional",
      "request_schema": {},
      "response_schema": {},
      "transport": "spawn|worker|http",
      "command": "python3",
      "args": ["script.py", "--x", "{{value}}"],
      "http_endpoint": "http://127.0.0.1:9000/echo",
      "http_method": "POST",
      "headers": {"x-tenant":"acme"},
      "timeout_ms": 5000
    }
  }
}

{{path.to.value}} templates are resolved against request payload fields.

Transport notes:

• worker (default): keeps one process alive and exchanges JSONL messages ({"id","payload"} -> {"id","ok","result|error"}).
• spawn: starts a process per request.
• http: forwards request payload to http_endpoint using http_method (default POST).

Examples:

• examples/echo.spec.json (spawn)
• examples/echo.worker.spec.json (persistent worker)
• examples/echo.http.spec.json (external HTTP)

Config

ORBIT merges defaults + ~/.orbit/config.json + ./.orbit/config.json + env vars.

Supported keys:

{
  "natsUrl": "nats://127.0.0.1:4222",
  "requestTimeoutMs": 5000,
  "retries": 2,
  "activeContext": "default",
  "kvBucket": "orbit_registry",
  "objectStoreBucket": "orbit_datapacks",
  "otel": {"endpoint":"http://127.0.0.1:4318/v1/traces","serviceName":"orbit-cli"},
  "performance": {
    "mode":"balanced",
    "traceSampleRate":0.2,
    "trustedLocal":false,
    "traceBufferMaxEvents":5000,
    "traceFlushIntervalMs":25
  },
  "routing": {"subjectPrefix":"orbit"},
  "api": {
    "authToken": "replace-with-strong-secret",
    "allowedHosts": ["127.0.0.1", "localhost", "::1"],
    "tls": {
      "enabled": false,
      "certFile": "~/.orbit/tls/server.crt",
      "keyFile": "~/.orbit/tls/server.key",
      "caFile": "~/.orbit/tls/ca.crt",
      "requestClientCert": false,
      "requireClientCert": false
    }
  },
  "runtime": {
    "serveMaxInflightGlobal":64,
    "serveMaxInflightPerMethod":16,
    "serveMaxQueueDepth":256,
    "workerPoolSize":2,
    "workerMaxPendingPerWorker":64,
    "apiMaxConcurrent":128,
    "apiMaxBodyBytes":1048576,
    "apiRequestTimeoutMs":15000,
    "agentMaxConcurrent":128,
    "agentMaxRequestBytes":262144,
    "publishDurableEnabled":false,
    "publishDurableTimeoutMs":2500,
    "callRateLimitPerSec":0,
    "circuitBreakerFailureThreshold":5,
    "circuitBreakerCooldownMs":10000,
    "circuitBreakerHalfOpenMax":1,
    "monitorMaxParallel":8,
    "monitorJitterMs":200,
    "monitorDownBackoffFactor":1.6,
    "monitorDownBackoffMaxMs":15000
  },
  "agent": {"enabled":true,"socketPath":"~/.orbit/agent.sock"},
  "contexts": {
    "default": {"natsUrl":"nats://127.0.0.1:4222","requestTimeoutMs":5000,"retries":2},
    "ci": {"natsUrl":"nats://127.0.0.1:5222","requestTimeoutMs":2000,"retries":1}
  },
  "logLevel": "info",
  "dataDir": "~/.orbit"
}

Production preset profiles for embedded-package use:

• low-noise: examples/embedded.low-noise.config.json
• high-throughput: examples/embedded.high-throughput.config.json
• shared-host (strict isolation on crowded machines): examples/embedded.shared-host.config.json

Quick start:

mkdir -p ~/.orbit
cp examples/embedded.low-noise.config.json ~/.orbit/config.json
# or:
# cp examples/embedded.high-throughput.config.json ~/.orbit/config.json
# cp examples/embedded.shared-host.config.json ~/.orbit/config.json

Env overrides:

• ORBIT_NATS_URL
• ORBIT_TIMEOUT_MS
• ORBIT_RETRIES
• ORBIT_LOG_LEVEL
• ORBIT_DATA_DIR
• ORBIT_NATS_HOST
• ORBIT_NATS_PORT
• ORBIT_NATS_IMAGE
• ORBIT_NATS_CONTAINER
• ORBIT_CONTEXT
• ORBIT_KV_BUCKET
• ORBIT_OBJECT_BUCKET
• ORBIT_OTEL_ENDPOINT
• ORBIT_OTEL_SERVICE
• ORBIT_PERF_MODE (balanced|hyper)
• ORBIT_TRACE_SAMPLE_RATE (0..1)
• ORBIT_TRACE_BUFFER_MAX_EVENTS
• ORBIT_TRACE_FLUSH_INTERVAL_MS
• ORBIT_TRUSTED_LOCAL (1)
• ORBIT_SUBJECT_PREFIX
• ORBIT_API_TOKEN
• ORBIT_API_ALLOWED_HOSTS (CSV, default 127.0.0.1,localhost,::1)
• ORBIT_API_TLS_ENABLED (1|0)
• ORBIT_API_TLS_CERT_FILE
• ORBIT_API_TLS_KEY_FILE
• ORBIT_API_TLS_CA_FILE
• ORBIT_API_TLS_REQUEST_CLIENT_CERT (1|0)
• ORBIT_API_TLS_REQUIRE_CLIENT_CERT (1|0)
• ORBIT_SERVE_MAX_INFLIGHT_GLOBAL
• ORBIT_SERVE_MAX_INFLIGHT_PER_METHOD
• ORBIT_SERVE_MAX_QUEUE_DEPTH
• ORBIT_WORKER_POOL_SIZE
• ORBIT_WORKER_MAX_PENDING
• ORBIT_API_MAX_CONCURRENT
• ORBIT_API_MAX_BODY_BYTES
• ORBIT_API_REQUEST_TIMEOUT_MS
• ORBIT_AGENT_ENABLED (1|0)
• ORBIT_AGENT_SOCKET
• ORBIT_AGENT_MAX_CONCURRENT
• ORBIT_AGENT_MAX_REQUEST_BYTES
• ORBIT_PUBLISH_DURABLE_ENABLED (1|0)
• ORBIT_PUBLISH_DURABLE_TIMEOUT_MS
• ORBIT_CALL_RATE_LIMIT_PER_SEC
• ORBIT_CIRCUIT_BREAKER_FAILURE_THRESHOLD
• ORBIT_CIRCUIT_BREAKER_COOLDOWN_MS
• ORBIT_CIRCUIT_BREAKER_HALF_OPEN_MAX
• ORBIT_MONITOR_MAX_PARALLEL
• ORBIT_MONITOR_JITTER_MS
• ORBIT_MONITOR_DOWN_BACKOFF_FACTOR
• ORBIT_MONITOR_DOWN_BACKOFF_MAX_MS
• ORBIT_FEDERATION_ENABLED (1|0)
• ORBIT_FEDERATION_LOCAL_DOMAIN
• ORBIT_FEDERATION_DEFAULT_DELIVERY_CLASS (best_effort|durable|auditable)
• ORBIT_FEDERATION_DISCOVER_WELL_KNOWN (1|0)
• ORBIT_FEDERATION_DISCOVERY_TIMEOUT_MS
• ORBIT_FEDERATION_REQUEST_TIMEOUT_MS
• ORBIT_FEDERATION_REPLAY_WINDOW_SEC
• ORBIT_FEDERATION_INBOUND_TOKEN
• ORBIT_FEDERATION_ALLOWLIST (CSV)
• ORBIT_FEDERATION_BLOCKLIST (CSV)
• ORBIT_FEDERATION_KEY_ID
• ORBIT_FEDERATION_SIGNING_SECRET
• ORBIT_FEDERATION_SIGNING_ALGORITHM (hmac-sha256|ed25519)
• ORBIT_FEDERATION_PRIVATE_KEY_FILE
• ORBIT_FEDERATION_PUBLIC_KEY_FILE
• ORBIT_FEDERATION_DISCOVER_JWKS (1|0)
• ORBIT_FEDERATION_REQUIRE_SIGNED_INBOUND (1|0)
• ORBIT_FEDERATION_TRUSTED_KEYS_JSON (JSON object: {"kid":"secret"})
• ORBIT_FEDERATION_OAUTH_ENABLED (1|0)
• ORBIT_FEDERATION_OAUTH_ISSUER
• ORBIT_FEDERATION_OAUTH_AUDIENCE
• ORBIT_FEDERATION_OAUTH_TOKEN_TTL_SEC
• ORBIT_FEDERATION_REPUTATION_ENABLED (1|0)
• ORBIT_FEDERATION_REPUTATION_DEFAULT_SCORE
• ORBIT_FEDERATION_REPUTATION_MIN_SCORE
• ORBIT_FEDERATION_REPUTATION_TRUST_FIRST_SEEN (1|0)
• ORBIT_FEDERATION_CHALLENGE_ENABLED (1|0)
• ORBIT_FEDERATION_CHALLENGE_DIFFICULTY
• ORBIT_FEDERATION_CHALLENGE_TTL_SEC
• ORBIT_FEDERATION_CHALLENGE_GRACE_SEC
• ORBIT_FEDERATION_E2EE_ENABLED (1|0)
• ORBIT_FEDERATION_E2EE_KEYS_JSON (JSON object: {"keyId":"base64-32-byte-key"})

Tracing

Each run writes JSONL events to ~/.orbit/traces/<run-id>.jsonl with span timing, retries, and error codes. If ORBIT_OTEL_ENDPOINT is set, trace events are also exported as OTLP spans over HTTP with retry/backoff.

Benchmarking

orbit bench executes concurrent request/reply calls against one method and reports:

• total requests / success / failed
• throughput (req/s)
• latency: min/avg/p50/p95/p99/max

Ramp mode lets you grow load during the run:

• --concurrency: starting concurrency
• --ramp-to: max concurrency target
• --ramp-step-s: seconds between increases
• --ramp-step-concurrency: workers added per step

Use this as a repeatable baseline before/after service or broker changes.

orbit bench-overhead compares direct NATS RPC against local orbit agent IPC+NATS path and reports Orbit-added p50/p95 latency. Start the agent in another terminal first:

orbit agent
orbit bench-overhead text.upper --json @req.json --iterations 200

Monitoring

orbit monitor emits newline-delimited JSON snapshots with:

• service
• status (up/down) from $SRV.PING.<service>
• ping_latency_ms
• error_rate (from $SRV.STATS endpoint counters when available)
• raw $SRV.STATS.<service> payload

Alerting options:

• --alerts: enable alert evaluation
• --alert-latency-ms: alert when ping latency exceeds threshold
• --alert-error-rate: alert when computed error rate exceeds threshold
• --alert-consecutive: require N consecutive failing checks before alerting
• --alert-cooldown-s: suppress repeated alert/resolve emissions for the same code within cooldown window
• --alert-no-down: disables default down-state alerts

When enabled, monitor emits explicit event: "alert" and event: "alert_resolved" rows.

Contexts

orbit context list
orbit context set dev --nats-url nats://127.0.0.1:4222 --timeout-ms 5000 --retries 2
orbit context use dev
orbit context current

Testing

npm run test

Tests cover:

• Envelope validation and tamper detection
• Retry/timeout behavior

External API + SDKs

Orbit includes two SDKs and two CLIs for external integration:

• Orbit CLI: orbit (bus/admin runtime)
• Python CLI: orbit-py (HTTP API client)
• TypeScript SDK: sdk/typescript
• Python SDK: sdk/python

API service endpoints:

• GET /healthz
• GET /readyz
• GET /metrics (Prometheus text)
• GET /.well-known/jwks.json
• GET /.well-known/oauth-authorization-server
• POST /oauth/token
• POST /v1/ping
• POST /v1/call
• POST /v1/publish
• POST /v1/inspect
• POST /v1/federate
• POST /v1/federation/send
• POST /v1/federation/challenge
• POST /v1/bridge
• POST /v1/abuse_report

Contract source:

• docs/orbit-api-contract.yaml

Federation (OIP v0)

Orbit now includes an initial federated agent delivery layer.

• CLI: orbit federate <agent@domain> <svc>.<method> --json @req.json
• Bootstrap CLI: orbit federation bootstrap --domain <your-domain>
• E2EE keygen CLI: orbit federation gen-e2ee-key --key-id <key-id>
• API action: POST /v1/federate
• Inbound federation edge: POST /v1/federation/send
• Well-known discovery: https://<domain>/.well-known/orbit-federation.json
• Challenge endpoint: POST /v1/federation/challenge
• Protocol bridge action: POST /v1/bridge (a2a and mcp)
• Abuse pipeline action: POST /v1/abuse_report

Quick bootstrap for immediate agent use:

orbit federation bootstrap --domain agents.example.com --client-id agent-runtime
orbit api --host 0.0.0.0 --port 8787

OIP v0 docs:

• docs/oip/v0/architecture.md
• docs/oip/v0/message.md
• docs/oip/v0/auth.md
• docs/oip/v0/discovery.md
• docs/oip/v0/errors.md

Production Deployment Notes

• Secure NATS configuration templates (TLS + auth + accounts) and 3-node cluster examples are in examples/nats/.
• Hardened deployment checklist is in docs/production-hardening.md.
• Never expose NATS monitoring port publicly; bind monitoring/admin ports to localhost or private networks only.